fix: race conditions in lock pop, CSV formula injection, serialize_finding None leak, consolidate plans, update docs

guarddog_nexus/routes/web.py

@@ -262,13 +262,12 @@ async def analyze_finding_htmx(
         return _render("_llm_spinner.html", request=request, finding_id=finding_id)
 
     async with lock:
-        try:
-            finding.report = {"status": "analyzing"}
-            await session.commit()
-            report = await analyze_finding(finding.data)
-        finally:
-            async with _llm_lock:
-                _llm_locks.pop(finding_id, None)
+        finding.report = {"status": "analyzing"}
+        await session.commit()
+        report = await analyze_finding(finding.data)
+
+    async with _llm_lock:
+        _llm_locks.pop(finding_id, None)
 
     if report is None:
         finding.report = None